Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: QuE94pqrbwt0jlDBylqUhYIzMUiuSiARMiDsLK00uxI=
Subject key identifier: 3B:BA:93:73:44:18:C3:C5:2A:C3:52:6A:88:A5:8B:D8:C3:29:5D:DE
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 01964DEBAD5A553645AF9E82657035B24616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 12:00:13 +0000
Manifest this update: Sat 19 Apr 2025 12:00:13 +0000
Manifest next update: Sun 20 Apr 2025 12:00:13 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: 93LOqZTZC0l+IEnSh4bEUvDmGLBx1K9PTmN3c5kXyok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:eb:ad:5a:55:36:45:af:9e:82:65:70:35:b2:46:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Apr 19 12:00:13 2025 GMT
Not After : Apr 20 12:00:13 2025 GMT
Subject: CN=3bba93734418c3c52ac3526a88a58bd8c3295dde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:64:d9:ee:ee:af:23:00:56:79:a8:16:cf:27:
da:c5:e8:d3:d4:cd:b8:42:39:7f:41:eb:0c:7f:6f:
53:23:9f:da:63:a9:04:0b:d2:d0:7b:8c:96:e8:c3:
9d:5e:3d:6d:d8:9d:bf:0a:4a:9b:f5:58:7b:27:98:
42:42:f2:0b:c7:5a:95:2e:a2:ee:37:29:74:87:b1:
46:1d:b7:b5:b4:ff:60:af:0e:89:64:1e:3b:35:30:
b2:db:9f:10:f2:b8:61:81:a9:9f:24:e3:5e:fd:31:
8b:29:ad:f2:6c:83:86:84:2c:fb:86:fa:61:94:aa:
10:95:ec:f2:e9:0a:9b:45:a1:81:fd:b7:15:77:06:
8d:35:12:5a:96:1a:22:e9:f1:0d:73:bd:8a:dc:21:
26:cb:ea:1d:a5:e8:69:ed:82:18:96:c1:95:08:67:
c9:4f:2e:3c:c2:42:69:bc:23:86:b4:3d:8f:96:ce:
a3:2e:d9:a0:18:94:f3:b2:6a:8a:e6:b8:3c:ee:5c:
67:8e:af:9b:84:cf:c1:56:59:a2:60:fb:2f:11:04:
de:2f:5a:57:cb:b6:a0:a3:53:ae:23:52:ea:0d:f7:
bc:3a:38:5f:8f:82:9f:fb:5b:f3:89:62:80:1d:2a:
e9:15:e0:e6:cf:54:25:50:cc:06:4a:fc:48:50:22:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BA:93:73:44:18:C3:C5:2A:C3:52:6A:88:A5:8B:D8:C3:29:5D:DE
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:9c:cf:bf:3a:67:63:a4:05:8c:4f:ff:f2:72:a2:98:3f:
eb:60:8d:80:b1:be:70:fb:88:d7:bc:11:9c:b9:a1:34:a8:84:
17:28:92:76:94:bc:d4:1d:9b:9c:e5:37:25:09:73:33:b9:54:
d5:2f:88:5b:ff:fc:ac:52:f1:28:9d:60:44:7d:35:e3:98:d7:
35:f7:8c:df:dd:d6:24:72:8b:1d:54:1f:0c:28:10:07:a1:49:
2f:83:a6:07:94:2c:5b:47:32:8d:38:db:1e:12:f7:c9:17:62:
da:86:29:74:86:35:cc:bc:68:3b:ce:ec:19:45:a5:8f:e1:ea:
77:87:8f:40:69:cf:2f:56:3b:33:30:bc:49:13:84:97:73:83:
4e:4a:c7:d0:ab:c8:94:db:d2:f4:fc:b2:c6:f0:07:21:0a:ad:
45:39:84:8f:21:19:81:a6:4b:aa:a9:bf:66:4b:cf:b2:fe:7e:
e2:63:11:13:90:90:74:95:9c:6d:f9:22:ac:10:47:f9:47:e8:
4a:c0:75:4d:9b:b7:f3:92:73:4d:e1:69:7a:88:b0:4e:dd:b8:
97:8c:52:6b:57:1b:c9:22:e2:60:39:09:c9:1a:3b:97:85:22:
f2:a6:7b:93:df:c9:70:36:37:72:ca:42:6b:61:63:64:06:ec:
aa:88:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:00:27 2025 by rpki-client